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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in this application : 

Listing of claims: 

1. Claims 1-25 (Canceled) 

26. (Previously Presented) A method of network control, comprising: 

collecting real-time operation information on one or more first network elements 
of a network; 

selecting a policy to be implemented by at least one second network element, 
different from the first network element, responsive to the collected real time 
information from the one or more first network elements, the at least one second element 
including an end-point element of the network and hosting an agent, and enforcing the 
selected policy on the agent hosted by the at least one second network element. 

27. (Currently Amended) A method according to claim [[I j] 26, wherein collecting real- 
time operation information comprises collecting information on operation problems. 

28. (Currently Amended) A method according to claim [[2]] 27, wherein collecting real- 
tiiTie operation information comprises collecting information on applications that do not 

operate or operate slowly. 

29. (Currently Amended) A method according to claim [[2]] 27, wherein collecting real- 
time operation information comprises collecting information on system or application 

crashes. 

30. (Currently Amended) A method according to claim [[1]] 26, wherein collecting real- 
time operation information comprises collecting information on software applications 
installed or running on the network elements. 
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3 1 . (Currently Amended) A method according to claim [[!]] 26, wherein collecting real- 
time operation information comprises collecting information on the communications 

between elements of the network. 

32. (Currently Amended) A method according to claim [[] J] 26, wherein selecting the policy 
to be implemented comprises selecting a policy relating to a software to be installed on 
the second network element. 

33. (Currently Amended) A method according to claim [[1]] 26, wherein selecting the policy 
to be implemented comprises selecting a policy relating to a software to be uninstalled 
from the second network element, 

34. (Currently Amended) A method according to claim [[ !]] 26, wherein selecting the policy 
to be implemented comprises selecting a policy relating to preventing installation of a 
software on the second network element, 

35. (Currently Amended) A method according to claim [[1]] 26, wherein selecting the policy 
to be implemented comprises selecting responsive to a determination that a group of 
network elements having a common problem have installed thereon a specific software 
application or combination of software applications. 

36. (Currently amended) A method according to claim [[1]] 26, wherein selecting the policy 
to be implemented comprises selecting a policy r e lat i n g -te allocation of which allocates 

network resources. 

37. (Currently Amended) A method according to claim [[!]] 26, wherein the policy is 
sel e cted implemented within less than 60 minutes from the collecting of the information. 

38. (Currently Amended) A method according to claim [[!]] 26, wherein collecting the 
operation information is performed repeatedly. 
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39. (Currently Amended) A method according to claim [[1 ]] 26, wherein the method is 
adapted to select the policy to be implemented by the at least one second network 
element responsive to operation information collected from at least 2 first network 
elements. 

40. ((Previously Presented) A network management system, comprising: 

an input interface; 

an output interface; and 

a processor adapted to collect attribute values from a plurality of network 
eleiTients of a network through the input interface, to find groups of network 
elements having similar attribute values for a plurality of attributes and to transmit a 
policy selected responsive to the groups, through the output interface. 

41 . (Currently Amended) A system according to claim [[15]] 40, wherein the processor is 
adapted to find, for a group of network elements having a problem, a combination of 
attribute values that correlate with the problem to at least a predetermined degree. 

42. (Currently Amended) A system according to claim [[15]] 40, wherein the processor is 
adapted lo find, for a group of network elements having a problem, a combination of 
attribute values that appears only on the network elements having the problem. 

43. (Currently Amended) A system according to claim [[15]] 40, wherein the processor is 
adapted to collect for at least one network element, a plurality of snapshot records of 
the network element at different times. 

44. (Currently Amended) A system according to claim [[1 5]] 40, wherein the processor is 
adapted to verify that each network element belongs to the network before collecting 
information from the network element. 

45. (Currently Amended) A system according to claim [[1 5]] 40, wherein the processor is 
adapted to find groups using a k-clustering or hierarchy clustering method. 
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